Anyone seen this & have any info?

[engine]

Anyone seen this & have any info?
x1crawler.e-echo.com

It's been sniffing around recently. Not much info available from the domain or the site as it has password access.

[littleman]

.e-echo.com traces back to Duke University Medical Center [networksolutions.com]. That is a little odd. I can't do any IP resolving, do you have one?

I did a little digging and came up with this host name: x1crawler.x-echo.com. Is that the one you hit with password protection? It's ip = 195.101.94.208 and x-echo.com's IP is 195.101.94.120. Looks like
they have a beefy server, they are running Apache/1.3.3 (Unix) mod_perl/1.21 and PHP/3.0.12.

According to a RIPE lookup the class C is in France
inetnum: 195.101.94.0 - 195.101.94.255
netname: FR-ECHO
descr: Socite ECHO
country: FR
admin-c: CR308-RIPE
tech-c: CR308-RIPE
status: ASSIGNED PA
notify: [e-mail]
mnt-by: RAIN-TRANSPAC
changed: [e-mail] 19970514
source: RIPE

And the whois [networksolutions.com] is also goes back to France. Strange huh?

[engine]

Thanks Littleman,
You got further than I did.
That's the matey. Mysterious. It could be a student research project.

The beast has not been back.

For some unknown reason I've been unable to the get to the bottom of, my ISP has LOST the site logs for the offending dates! Grrrrr.

[Machiavelli]

x-echo is owned by Echo which powers Voila [voila.fr]. Submit a site to her & you'll see her in your web logs.

[engine]

Machiavelli, thanks.
Have they changed their spider name then? I don't remember it being this baby.

[Machiavelli]

I suppose that it is something to do with Voila breaking out of the francophone market into the international [voila.com] market; not sure how much that has taken off yet, although Wanadoo, which has something or other to do with Voila, has bought up one of our (UK) largest ISPs.
Just realised I'm telling you what you told me elsewhere, engine...

[littleman]

Machiavelli - thanks for the information. I'm still curious about x1crawler.e-echo.com. The names are so similar, they have to be related at least in their technology. Yet they are coming out of two very different places.

[Machiavelli]

littleman - have you had BOTH the x-echo and the e-echo entries in your logs? engine - was it definitely e-echo and not x-echo? For if it was just a typographical error, then I think we may be hunting for heffalumps.

[engine]

>engine - was it definitely e-echo and not x-echo?

For some unknown reason I've been unable to the get to the bottom of, my ISP has LOST the site logs for the offending dates! Grrrrr.

Without being able to check, it is difficult to confirm. I'm still working on this to find out what happened to the logs.